PT-2013-2514 · Siemens · Siemens Wincc

Artem Chaykin + 2 · Published 2013-03-21 · Updated 2013-03-22 · CVE-2013-0669

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Siemens WinCC (TIA Portal) version 11

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by sending a crafted HTTP request to the HMI web application.

Recommendations For version 11, apply the necessary patch or update to fix the issue, or consider temporarily restricting access to the HMI web application to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-0669

Affected Products

Siemens Wincc

References · 3

• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0669 · Security Note
• http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf · Note